This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json) Hash identifier: DcAJ6HCpSyCOA2WsVNkc6CDzvjeL2tySE9jbaOTIJRA= Subject key identifier: B2:3E:D6:9A:99:3C:7C:C7:54:64:D3:72:8F:1F:42:FF:AB:EF:2A:D2 Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Certificate serial: 019B19BB5845A7A9BE8520A517F94A2BD331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 22:01:06 +0000 Manifest this update: Sat 13 Dec 2025 22:01:06 +0000 Manifest next update: Sun 14 Dec 2025 22:01:06 +0000 Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: aYIhIbu15GhggngerxqC1qlnZYKmOy7EswHlCfwddSg=) 2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:58:45:a7:a9:be:85:20:a5:17:f9:4a:2b:d3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Validity Not Before: Dec 13 22:01:06 2025 GMT Not After : Dec 14 22:01:06 2025 GMT Subject: CN=b23ed69a993c7cc75464d3728f1f42ffabef2ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:ad:8b:ea:80:cc:70:26:80:97:e6:36:05: c6:f1:06:d3:c3:ed:2a:9b:4f:a5:0e:b5:43:a8:05: d1:02:ce:9d:f5:62:14:89:cf:fc:13:95:d6:39:00: bc:5a:d7:0d:07:6e:18:c2:83:84:cf:a8:f1:aa:27: c3:16:72:7d:bc:1a:72:2d:89:ff:a0:cc:66:ea:f5: ae:64:4e:21:02:6a:4c:16:55:0d:34:3a:01:6e:07: 06:2c:6a:af:fb:8f:0b:9c:ce:8a:f2:32:83:a2:15: 80:77:b6:59:59:ec:a5:f4:e2:59:8a:08:c1:ac:08: 53:e6:7c:0a:02:1c:39:b1:f1:dd:1c:04:e2:9a:e1: b3:31:15:b2:fc:71:37:65:a5:09:2b:c2:c7:22:c0: da:5c:8b:14:f2:fe:ca:59:99:80:a2:ee:15:21:6b: d1:1f:e4:0f:8e:7c:60:e8:88:01:a0:05:c2:ab:b8: df:df:3b:ab:04:eb:12:bd:10:e8:36:70:6c:be:ca: ab:cc:d7:c4:95:3a:4c:17:58:5f:5f:6b:65:cc:13: 9e:60:48:d2:ca:f4:63:7f:57:7e:ed:af:71:4b:78: 4d:aa:58:08:21:8f:3e:d9:4e:0d:c6:71:8c:2f:4f: 5c:5b:ec:63:69:48:71:88:06:fa:23:79:fc:26:bb: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3E:D6:9A:99:3C:7C:C7:54:64:D3:72:8F:1F:42:FF:AB:EF:2A:D2 X509v3 Authority Key Identifier: keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:41:04:62:df:16:a8:a7:be:1c:77:be:fa:8b:e9:21:36:84: 69:30:fc:b9:26:fd:7e:86:d5:6a:3f:f0:21:be:a6:28:39:1a: 28:c6:84:77:d7:ae:3d:32:61:7b:dc:2a:7c:c2:c6:33:1c:e2: 8d:d0:cd:b2:d0:0f:ed:31:06:f4:d8:56:aa:fb:60:39:13:ee: fb:98:67:5e:14:29:27:45:64:17:15:12:f3:79:9b:25:9e:bd: 3b:48:34:c0:79:02:5e:c1:47:74:1c:e4:27:ac:1a:f4:c1:d7: d6:26:1d:ed:07:8b:6c:45:86:07:f5:df:b4:e9:71:c8:c4:21: eb:61:f5:e5:30:ce:27:8d:de:23:8f:08:84:4b:35:8a:18:d1: f5:c1:46:28:d1:87:31:a7:9c:41:2c:30:49:7f:c1:be:88:71: 50:1c:f8:0e:1a:8f:52:a5:07:4c:69:3a:86:74:87:94:8c:8f: 26:3b:5e:8e:10:54:03:63:62:36:a2:03:6a:4e:08:75:c0:67: 48:94:8f:08:87:08:7a:5a:90:5a:fc:05:b6:7d:76:1e:9b:ae: 1d:eb:3c:59:e8:04:2b:be:18:37:80:7c:5c:36:9b:9b:2a:23: 4a:e5:f1:04:ca:d2:5a:75:8b:c9:47:62:bd:3a:53:ab:8e:c1: 26:4e:a5:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu1hFp6m+hSClF/lKK9MxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGJjZjIxMjdhZjBiMmUwYTI0NmFlNDU3NDMwNGM3YWU3 NzE1ZTkwHhcNMjUxMjEzMjIwMTA2WhcNMjUxMjE0MjIwMTA2WjAzMTEwLwYDVQQD EyhiMjNlZDY5YTk5M2M3Y2M3NTQ2NGQzNzI4ZjFmNDJmZmFiZWYyYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdati+qAzHAmgJfmNgXG8QbTw+0q m0+lDrVDqAXRAs6d9WIUic/8E5XWOQC8WtcNB24YwoOEz6jxqifDFnJ9vBpyLYn/ oMxm6vWuZE4hAmpMFlUNNDoBbgcGLGqv+48LnM6K8jKDohWAd7ZZWeyl9OJZigjB rAhT5nwKAhw5sfHdHATimuGzMRWy/HE3ZaUJK8LHIsDaXIsU8v7KWZmAou4VIWvR H+QPjnxg6IgBoAXCq7jf3zurBOsSvRDoNnBsvsqrzNfElTpMF1hfX2tlzBOeYEjS yvRjf1d+7a9xS3hNqlgIIY8+2U4NxnGML09cW+xjaUhxiAb6I3n8JruiqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI+1pqZPHzHVGTTco8fQv+r7yrSMB8GA1UdIwQY MBaAFNNLzyEnrwsuCiRq5FdDBMeudxXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUt YWZjMWVlNDYxMWExLzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUtYWZjMWVlNDYxMWEx LzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEEEYt8W qKe+HHe++ovpITaEaTD8uSb9fobVaj/wIb6mKDkaKMaEd9euPTJhe9wqfMLGMxzi jdDNstAP7TEG9NhWqvtgORPu+5hnXhQpJ0VkFxUS83mbJZ69O0g0wHkCXsFHdBzk J6wa9MHX1iYd7QeLbEWGB/XftOlxyMQh62H15TDOJ43eI48IhEs1ihjR9cFGKNGH MaecQSwwSX/BvohxUBz4DhqPUqUHTGk6hnSHlIyPJjtejhBUA2NiNqIDak4IdcBn SJSPCIcIelqQWvwFtn12HpuuHes8WegEK74YN4B8XDabmyojSuXxBMrSWnWLyUdi vTpTq47BJk6luw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:12 2025 by rpki-client